Effective date: 2026-09-10
Version: privacy-ohio-2026-09-10-v1
1. Who is responsible for your information
Real Nova World Corporation operates Bondora and is responsible for the personal information described in this notice. Our business contact address is 5538 E Galbraith Rd, Apt 38, Cincinnati, OH 45236, United States. Contact real@realnova.world for privacy questions and requests. You may also contact real@realnova.world for help directing a request.
This notice covers visitors, people who request or pay for readings, people whose information is supplied for a reading, and people who contact us. It does not govern a payment provider’s or another external service’s independent activities. Those providers issue their own privacy notices.
2. Information we collect
Information for a reading. New readings collect a relationship situation, question and any included follow-up questions you submit. The new form does not request names or birth profiles. Your free text may nevertheless identify you or another adult. Older saved readings may retain names or aliases, birth dates and optional birth times or places originally supplied under the applicable earlier notice; removing those fields from the new form does not erase older records.
Generated information and inferences. For current reflections we store the supplied statements, selected fixed exercise identifiers and text, preview, full report and follow-up answers. We retain relevant generation records, including input statements, outputs, model and prompt versions, processing status and error or safety information. Legacy readings may contain structured signals, scores, labels or earlier generated interpretations. These records can be personal information even when an interpretation is uncertain or wrong.
Purchase information. We receive information needed to administer a transaction, such as the PayPal order and capture references, amount, currency, payment or refund status, and timestamps. Payment-provider responses may also contain payer contact or account-identification information. PayPal handles payment credentials within its own flow. Do not send us your PayPal password or full payment card details.
Before a new purchase, we ask for the service recipient's actual country, state, city and ZIP code, together with confirmation of personal non-business use and adult/legal capacity. We keep the service location separately from any payer billing location returned by PayPal; the payer and recipient need not be the same person. We use these details with the accepted product, price, legal and tax-rule versions, actual payment fees/net receipts, delivery dates and refund records for financial administration and CPA review. Minimal financial vouchers follow RNWC's approved seven-year business retention policy and are separated from the private relationship content, which has its own shorter retention policy. Authorized RNWC personnel may securely export these financial facts and transfer them to its confirmed professional accountant. The financial export excludes reports, questions, third-party names and private access credentials. Missing fee or tax facts are recorded as unknown until actually established; this does not change the customer's agreed final total.
Technical and usage information. Our website and infrastructure receive information needed to deliver and secure a connection, such as IP addresses, request times, browser or device information, requested resources, and error information. Private session identifiers protect access to readings. Where you permit optional analytics, we use limited interaction events to understand navigation and product use. A pseudonymous identifier or an event connected to a reading is not necessarily anonymous.
Choices, permissions, and correspondence. We record relevant policy versions, the time and scope of an agreement or choice, reading and support references, and communications about support, refunds, or privacy requests. We do not ask you to submit a government identity document as a routine condition of using the reading service.
Service eligibility. Before new relationship collection or purchase, the service checks country and state information supplied by the deployment infrastructure and your separate state, adult/capacity and no-minors declarations. A short-lived signed cookie binds the declaration to the current policy and region; minimal state and declaration timestamps may accompany the reading evidence. A declaration or approximate network region does not verify domicile or identity. This check does not ask for identity documents, a full address or an additional raw-IP evidence record. Infrastructure connection information remains subject to the technical-information description above.
3. Where information comes from
Information comes from you, the browser or device used to access Bondora, our service providers, our generation processes, and—when someone requests a compatibility reading—another person who submits your details. A person submitting someone else’s information is asked to have informed permission or other lawful authority and to share this notice. That request does not replace our own obligation to establish an appropriate legal basis or provide information where required.
We do not request your precise current device location or a birth place in the new reflection form. Do not provide a home address, private correspondence, identity numbers or sensitive personal details in a reading question.
4. Why we use information
We use reading information to create the preview or report you request, supply included follow-ups, maintain the reading’s state, and provide paid access. We use purchase records to verify payment, prevent duplicate charging, reconcile transactions, handle refunds and disputes, and meet financial recordkeeping obligations.
We use necessary technical information to maintain service availability, investigate errors, protect private readings, prevent abuse, and respond to security incidents. We use support and rights-request information to verify a request proportionately, communicate with you, and resolve it. Authorized personnel may review relevant information when necessary for these purposes; the service is not represented as end-to-end encrypted or inaccessible to its operator.
With your choice where required, optional analytics help us assess which features are useful and identify usability problems. Reading questions, names, birth details, private access credentials, and report text are not permitted as product-analytics event properties. Operational generation records are separate from product analytics and may contain reading content.
We do not sell personal information or share it for cross-context behavioral advertising. We do not use private reading content to train our own or a provider’s general-purpose AI models. Those commitments do not mean that no service provider processes information to supply or secure the service. Any future materially different use would require an appropriate notice, legal basis, and choice before it begins.
5. AI processing
Bondora uses the OpenAI API to select exercise identifiers when current AI generation is active. Selection requests include the whole submitted relationship situation and question, and for a follow-up the follow-up question, together with the fixed exercise catalog and instructions. Current selection does not need names, birth profiles, astrological signals or the earlier full report. Older generation records and saved reports may reflect the earlier method described in their original notice. Do not assume that text sent to AI is anonymous.
OpenAI states that API data is not used to train its models by default unless the customer opts in. Its API services may retain content for abuse monitoring and other service-specific purposes, subject to its current terms, settings, and applicable exceptions. This is not a promise of zero retention. Bondora’s own saved reading and generation records are separate from a provider’s retention. The current provider and processing information is available through our Privacy Choices and Requests page or from real@realnova.world.
AI interpretations are not verified facts about you. We do not use reading scores to make decisions about your eligibility for employment, credit, insurance, housing, or similar opportunities. You may contact us about inaccurate personal information or an inference associated with you.
6. Who receives information
We provide information to service providers only as relevant to their role: hosting and content delivery; database storage and backup; AI generation; security and operational support; payment processing; and delivery of support or transaction communications. Providers may process information under our instructions or, for activities such as a payment provider’s fraud prevention and legal compliance, under their own legal responsibilities.
We may disclose information when necessary to comply with a lawful requirement, protect rights and safety, investigate fraud or security problems, or establish or defend a legal claim. We assess the scope of a request and do not treat every request for information as automatically valid.
If the business is reorganized, sold, or transferred, relevant information may be disclosed with appropriate safeguards and subject to applicable notice and other requirements. The recipient must respect applicable legal restrictions. We do not publish your private reading merely because you use the service. Sharing a copy yourself can expose information about both participants, so consider their privacy first.
7. Browser storage and analytics choices
We use a reading-specific browser cookie to help authorize access to your private reading. In the current session design, that cookie expires 30 days after it is issued. Cookie expiry is not the same as deletion of a reading from our databases, and it does not define or override the access period of a purchase.
Cookies, session storage, local storage, and similar technologies are explained in the Cookie and Browser Storage Notice. You can manage optional analytics through Privacy Choices. Necessary access, security, payment, and choice-recording functions cannot be switched off through an analytics preference, although browser settings may block them and affect functionality. Refusing optional analytics does not prevent you from purchasing or receiving a reading.
8. How long we keep information
We retain identifiable information only for a justified purpose and for as long as that purpose and applicable requirements call for it. We determine periods by the type of information, the promised access period, the need to complete delivery or resolve an issue, applicable financial recordkeeping requirements, the potential for a relevant claim, and the sensitivity of the information.
The 30-day online access period for a new purchase is a supply commitment, not a rule that all information is deleted after 30 days. Access expiry, a request acknowledgement and receipt of a deletion request do not establish that deletion has occurred. Reading content, generation records, financial evidence, support records, logs and backups require their own applicable retention and deletion treatment.
We do not keep unpaid or abandoned readings solely because a paid product might be offered later. Paid reading content and included follow-ups are retained to provide the promised access and to address related support or remedy obligations. Generation records are retained only as needed for a defined operational, safety, or dispute purpose; they are not an unrestricted permanent training archive.
For new records covered by this notice, RNWC's internal targets are seven days for unpaid drafts and previews; the purchased 30-day access period plus up to seven further days for relationship content needed for recovery or fault handling; 30 days for ordinary minimized technical events; and 90 days after actual closure for closed support correspondence. These periods do not shorten an earlier purchase, an approved access remedy, or a legally required preservation period. Unresolved payments, undelivered purchases, disputes and legally justified holds require a separate review before clearing content. Clearing records is an operator-reviewed process; reaching a time limit or expiring a cookie does not prove deletion occurred.
Minimal transaction, refund, and agreement records may need to be retained after the associated reading content is erased. Where possible, we separate those records from birth details, questions, and reports. A legal hold can require limited records to be kept longer, but it does not justify keeping unrelated information indefinitely.
Deleting information from active systems may not immediately remove it from a restricted backup. Backup information is removed through the applicable backup cycle and protected from ordinary use; when a backup is restored, applicable deletion restrictions must be reapplied. Contact real@realnova.world for the retention information relevant to your request, including any reason a limited record must be retained.
9. International processing and regional information
Our service providers may process information in countries other than the country where you live. The actual providers, processing locations, and any applicable international-transfer arrangements are described in /privacy/providers. You may request further information at real@realnova.world.
Where the EEA or UK data-protection rules apply, our regional privacy supplement at /privacy/eea-uk explains the relevant legal bases, information about data received from another person, any required regional contact, and the actual safeguards for restricted international transfers. We do not represent that a transfer is covered by a certification or contract merely because a provider offers that option.
10. Your rights and choices
Depending on the law that applies to you, you may have rights to know about or access personal information, obtain a copy, correct inaccuracies, request deletion, restrict processing, obtain portable data, or object to processing. Where we rely on consent, you may withdraw it for future processing without affecting the lawfulness of earlier processing. A privacy notice acknowledgement is not a substitute for a separate consent where one is needed.
Right to object. Where processing is based on legitimate interests, you may object for reasons relating to your circumstances, subject to the applicable legal rules. You may object to direct marketing at any time. Use real@realnova.world or Privacy Choices to communicate your objection.
Certain US state laws may also provide rights to opt out of sale, targeted advertising, or specified profiling, to limit certain uses of sensitive personal information, to use an authorized agent, and to appeal a request decision. Those rights depend on the applicable law and whether it covers the activity. We do not sell information or share it for cross-context behavioral advertising. A recognized Global Privacy Control signal is treated as a request to opt out of any covered sale or sharing, and our Privacy Choices explain its interaction with optional analytics. A legacy “Do Not Track” header is a different signal; it does not establish a universal technical instruction across all providers.
We will not discriminate against you for exercising a privacy right. We may need to explain when deleting or restricting information makes it impossible to continue a feature that actually needs that information. You can also complain to the relevant data-protection or consumer-protection authority. You do not have to resolve a complaint with us before contacting an authority.
11. Making a request—including requests by the other person
Email real@realnova.world or use the working request options on Privacy Choices. Explain the action you are requesting and provide a reference you have, without sending passwords, access cookies, or unnecessary sensitive details. A reading reference helps locate a record but is not proof that you are entitled to see it.
We will use proportionate verification, provide information about any necessary further step, and respond within the period required by applicable law. Where an extension is legally available, we will explain it within the required period. If we cannot grant all or part of a request, we will explain the applicable reason and any available appeal or complaint route.
You may make a request even if someone else supplied your information and you do not have a Bondora account. We will protect the rights and information of both people: for example, a request to access one person’s information does not automatically authorize disclosure of another person’s private question or correspondence. Verification must not rely only on a publicly known name or birth date.
12. Security, children, and updates
We use access controls and other measures designed to protect information. No internet service or storage method is completely secure, and we do not promise absolute confidentiality. Protect the device and browser through which you access a reading and tell us about suspected unauthorized access.
Bondora is intended for adults aged 18 or older and does not permit readings about minors. Contact real@realnova.world if you believe a child’s information has been submitted. We will assess the situation, stop inappropriate processing, and take the steps required by applicable law. An age statement does not excuse ignoring information that indicates a child is involved.
We may update this notice to reflect changes in the service or legal requirements. The effective date and version identify the current notice. We will provide additional notice and obtain a choice where required before materially changing how we use information. Questions and complaints can be sent to real@realnova.world or 5538 E Galbraith Rd, Apt 38, Cincinnati, OH 45236, United States.